Unscored DSA-745-1 2 CVEs

drupal - arbitrary command execution

Published Jul 10, 2005 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.1	drupal	4.5.3-3

Vulnerabilities 2

Unscored —

CVE-2005-1921 Public exploit EPSS 79%

Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For P…

Jul 1, 2005
Unscored —

CVE-2005-2106 Public exploit

Unknown vulnerability in Drupal 4.5.0 through 4.5.3, 4.6.0, and 4.6.1 allows remote attackers to execute arbitrary PHP …

Jul 1, 2005